beargiles

create or replace function get_host_enum(hostname text)
  returns host_enum as
$$
declare
   _value host_enum;
begin
   select hosts1.key from hosts1 where hosts1.hostname = $1 into _value;

   if not found then
      insert into hosts1(hostname) values ($1) on conflict do nothing;

beargiles

/**
 * Permissive SecurityManager
 *
 * This SecurityManager can still be highly restricive but it allows
 * access to a sensitive service.
 */
public class PermissiveSecurityManager extends SecurityManager {
    private final List<String> hosts = new ArrayList<>();

    public PermissiveSecurityManager(String... hosts) {

beargiles

-- ---------------------------------------
-- Preparation
-- ---------------------------------------
CREATE SCHEMA pgcrypto;
CREATE EXTENSION pgcrypto WITH SCHEMA pgcrypto;

CREATE USER key_manager;
CREATE SCHEMA key_manager;
ALTER SCHEMA key_manager OWNER TO key_manager;
ALTER ROLE key_manager SET search_path TO key_manager;

beargiles

--
-- Create user-defined record type for symmetric keys
--
CREATE TYPE skey AS (
  key_id int4,
  key bytea,
  type text
);

--

beargiles

--
-- Function that needs to explicitly check whether the 'color' value is valid
--
CREATE OR REPLACE FUNCTION get_gluon(color text) RETURNS TEXT AS $$
#print_strict_params on
DECLARE
  duck TEXT;
BEGIN
  IF color not in ('red', 'green', 'blue') THEN
     RAISE EXCEPTION 'unknown color %', color;

beargiles

CREATE TABLE color (
  color TEXT CHECK (color IN ('RED', 'GREEN', 'BLUE'))
);

beargiles

--
-- Create user-defined enum type.
-- (List details with '\dT+ color' in psql)
--
CREATE TYPE color AS ENUM ('RED', 'GREEN', 'BLUE');

--
-- Create a table using the user-defined enum type.
--
CREATE TABLE quark (

beargiles

CREATE OR REPLACE FUNCTION get_gluon(color color) RETURNS TEXT AS $$
#print_strict_params on
DECLARE
  duck TEXT;
BEGIN
  CASE color
    WHEN 'RED'::color THEN
      duck := 'Huey';
    WHEN 'GREEN'::color THEN
      duck := 'Dewey';

beargiles

--
-- Define custom enum type containing supported encoding algorithms
--
CREATE TYPE encoding AS ENUM ('BASE64', 'ESCAPE', 'HEX');

--
-- Type-safe alternative to encode(bytea, text)
--
CREATE OR REPLACE FUNCTION encode (value bytea, alg encoding) RETURNS text AS $$
#print_strict_params on

beargiles

import java.io.File;

import javax.security.auth.kerberos.KerberosPrincipal;
import javax.security.auth.login.LoginContext;
import javax.security.auth.login.LoginException;

import org.junit.BeforeClass;
import org.junit.ClassRule;
import org.junit.Test;
import org.junit.rules.TemporaryFolder;